Your Rights

Data protection law gives you, as a data subject, certain rights in certain circumstances. In accordance with law, you have a right to:

Request access to your personal data: This means that you have a right to request, free of charge, a copy of the personal data we hold about you;

Request the correction of your personal data: This means that if any personal data we hold about you is incomplete or incorrect, you have a right to have this corrected. Keep in mind, however, that we may need you to provide evidence and documentation (such as your ID documentation or proof of address) to support your request. It can be declined due to our legal obligations

Request the erasure of your personal data: This means that you may request the erasure of your personal data where we no longer have a legal basis to continue processing it or retaining it. Please be aware that this right is not absolute – meaning that we are not able to satisfy your request where we are obliged under a legal obligation to retain the data, or where we have reason that the retention of data is necessary for us to defend ourselves in a legal dispute;

Object to the processing of your personal data where we rely on our legitimate interests (or those of a third party) to process your data and you feel that our processing of your data in such a manner impacts your fundamental rights and freedoms. However, in some cases, we may be able to demonstrate that we have a compelling legitimate ground to process your data which may override your rights and freedoms. You may submit your objections to processing of your personal data on the grounds of the above-mentioned legitimate company interests by contacting our DPO;

Request the restriction of the processing of your personal data: You may ask us to temporarily suspend the processing of your personal data in one of the following scenarios: (a) where you want us to establish the accuracy of the data, (b) where our use of the data is unlawful but you do not wish for us to delete it, (c) where you need us to retain your data even when we no longer need it in order for you to establish, exercise, or defend legal claims, or (d) where you have objected the use of your data but we need to verify whether we have overriding legitimate grounds to use it;

Request the transfer of your personal data (i.e. data portability): This means you may request us to provide you with certain data we process about you so you may transfer it to another controller. This right only applies to data acquired through automated means which you initially provided consent for us to use, or where we used the data to perform our obligations under a contract with you;

Withdraw your consent at any time where we rely on your consent to process the data: ‘Opting out’ or withdrawing your consent will not affect the lawfulness of the processing carried out by us up until the time you withdraw your consent. Withdrawing your consent means that, going forward, you no longer wish for us to process your data in such a manner. This means that you may no longer consent for us to provide you with certain services (such as marketing. You may withdraw your consent at any time through the account profile settings on the website;

Lodge a complaint with a supervisory authority;

In order to exercise your rights as explained above, we may need to request specific information about you to help us verify your identity. This is a security measure to ensure that we are certain that the person to whom we disclose your personal data is really you.

We will do our utmost to respond to all legitimate requests within a one-month timeframe from the submission of a request. If your request is particularly complex, or if you have made multiple requests in a certain time period, it may take us a little longer. In such a case, we will notify you of this extension.